Cyber Security Enthusiast

Joined April 2017
16 Photos and videos
Keerthi retweeted
24 Jan 2024
New from 404 Media: inside a global phone spy tool that takes data from ads inside normal apps to monitor billions. Company removed videos while I was asking questions; we archived in the article. Google has now cut-off a connected company in response. 404media.co/inside-global-ph…
6
227
430
80,477
Keerthi retweeted
I did not know, but I guess I did imagine, that car manufacturers were intercepting and sharing text messages with law enforcement. Seems like a pretty terrible idea, unless there’s more to this story. therecord.media/class-action…
19
135
379
152,977
Keerthi retweeted
13 Oct 2023
Earlier this year @AmnestyTech and @_clem1 from Google TAG found an in-the-wild iPhone zero day full chain. Today I’m publishing my analysis of the Safari sandbox escape component, the first in-the-wild sample to break into the new Safari GPU process.
5
110
394
92,055
Keerthi retweeted
.@_clem1 discovered another ITW 0-day in use by a commercial surveillance vendor: CVE-2023-5217. Thank you to Chrome for releasing a patch in TWO 🤯day!! chromereleases.googleblog.co…
6
80
289
71,420
Keerthi retweeted
Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬 blog.google/threat-analysis-…
6
274
919
327,240
Keerthi retweeted
🚨SCOOP: My new @Haaretzcom investigation reveals new Israeli cyber companies developed technology that exploits the heart of the online economy - ads - not just for mass surveillance, but also to hack phones 👇 haaretz.com/israel-news/2023…
23
488
787
284,921
Keerthi retweeted
22 Aug 2023
New—hackers have access to a powerful chain of data that lets them dox nearly anyone in US for $15. With credit cards your address goes to the credit bureaus. That is then sold to companies, and the hackers tap into that. Targets include Musk, Rogan, Biden 404media.co/the-secret-weapo…
25
436
1,143
288,537
Keerthi retweeted
14 Aug 2023
Need to access those precious encrypted kitten pics but you can't unlock your phone ? Don't worry, in this blog post @max_r_b and @DamianoMelotti will take you in a journey to the depths of #Android's file-based encryption so you know what to do. blog.quarkslab.com/android-d…
4
47
96
11,790
💣💣 The inevitable has happened. #CoWINDataLeak reported by @thefourthlive @ManoramaDaily is a largest #DigitalPublicInfrastructure disaster. Thread on some impacts.
🚨 The Details given by you to the #Cowin portal can be accessed by anyone if they know your mobile number or Aadhaar. A telegram bot was sharing data including Name, Aadhaar/passport, Date of Birth, Gender, Vaccination centre etc. (1/n) #Manorama
10
150
163
66,802
Keerthi retweeted
A while back, I stumbled upon a file I consider the largest piece of evidence revealing how hundreds of data brokers trade personal data on everyone, including very sensitive data, globally. Massive investigation by @themarkup and German @netzpolitik_org: themarkup.org/privacy/2023/0…
8
421
958
211,853
Keerthi retweeted
1 Jun 2023
India seems to be the new destination for “Hacking for hire” operatives. A lack of ethics and legal action allows these people to operate freely. I’m sure a lot of them are even hand in glove with the government. newyorker.com/news/annals-of…
1
5
10
1,066
Hundreds of models of Gigabyte motherboards, used in gaming and other high-performance computers, have a backdoor in their firmware that invisibly downloads code to the machine at startup—and does so insecurely, leaving the feature open to abuse. wired.com/story/gigabyte-mot…
14
222
460
124,106
Keerthi retweeted
31 May 2023
The recording of my @offensive_con talk about eSIM is online: Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology youtu.be/5oecn43xsDg?t=1085 #OffensiveCon23
18
49
6,274
Keerthi retweeted
29 May 2023
In which we describe one of our incident response engagements where five different actors were observed exploiting the same victim for completely different purposes. withsecure.com/en/expertise/…

1
11
35
13,087
Keerthi retweeted
☢️MSI leaked code signing certificate already abused by Threat Actors (expires in 2024). I've collected 9 recently leaked certificates to cover up in upcoming Modern Initial Access training sessions🔥 bit.ly/456uq9u 👾 Already weaponised in Red Macros Factory 1.8!
1
97
262
43,558
Keerthi retweeted
13 May 2023
Nice intro for beginners to bluetooth communications reverse engineering (Domyos EL500) Credits @Palantir555 jcjc-dev.com/2023/03/19/reve… #bluetooth
2
149
552
57,671
Keerthi retweeted
12 May 2023
A couple of nice blog posts for learning about Linux process injection (specifically sshd injection for credential harvesting) @_xpn_: blog.xpnsec.com/linux-proces… @jm33_m0: jm33.me/sshd-injection-and-p… #sshd #processinjection #redteam #infosec #cybersecurity #Linux
6
127
436
42,358